signed10322c[.]apk

Sharing

Reason

open /tmp/unpacked-apk2920251376/assets/egchTgSDA73M90LuCSftkP2GgqF1ZDSwrAJ8GV1PWRl1q1vBKPFCYNUEpHbCM1P8oGuJqNYS1BHEDaqq6drj9pJOQfT0Uyd6bnNUGWk72XLwgqaprWHIKF097R4l5Y8DxMCpyGUk4urlPmIzeDT92GvGoOX039bd0i0FZW2VbxPpnYuVjEhCf0L2q6aUT4r5towHncLtL87F1gtBtcQy2J91Hhp4VhbhfU70CYHg4Z2hcgajNKBRo4dUpG0gYRJD7ZAgkt9GFKFdS1YBgfrkRv4mR: file name too long

General

Target

signed10322c.apk
Size

21.1MB
MD5

e7444b7297d2c587db1a88029bc3b135
SHA1

fd3f410aba5e7c410c3fee24f1f2389ae85f0d8e
SHA256

e7931026e1e9fe96908a87351176d303ee79378e5aff20532816655b9a159f8c
SHA512

c1eb59f92a6f953dfb9c66eac7bb93391adb626e0887c3ffdfa8c71641139b43681b87fb3c5d94071f9f801c352bfae05a9657adfb10c9d7f10949f6bcec093b
SSDEEP

393216:RqGxptGfIp2Snt111c57OdHLCc1zXZhnEDCsqbuoYfeTp0VnfLRfwzXd/SVt6zwP:4Gp2M5NG5idrz1zJtEpqQfeTCVfLR6Ev

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

signed10322c.apk
.apk android arch:arm

Password: spf200
3weNRrBkqWelf0ADQl4F3Ske8EiIbmmIS1dKr04Q3DFKo7WG
63MxIZfBiMUJPR0RVTXQQ4DEfk0fLGqd1OsRcNW7WTP53gzyyOtRkXucAhrxZ01
80MJFdb3fJtIkAqCspY0VL10sEw04I69
8gDmGnVcv7JZccFoKLyPIygBjhgLGi0cNtNciSxp2Kv5rgznsz4SH3DK0bdzgjGmgHm
94zzOgqvcmYDm25lIC0VEhvOi9mz0D6iIUFZNXXQgVRELl5QHJM0yiG1JWqP42GKqP5DxfJVPkOUA2c7eH3r2gVznOq1GiWophn7rCtB01koEXARUuKx0oSj4FpTZToHyAFtOfQ
C1jW5AvfN0dVrhXbTCwtlmYmprYNsnmXGOP5FD0Pb2zxvhxOCo00vtZpd7HNNTYANqpNC3HpDSstYA2i5kkdxmCmZA1J6wbte9Ve2UlKSKHNbGCNezTDIUdAZcZcb9ugR0pZQXql9LwXQZlt9oEHOJVu6uqZ6
CNGmgW7sRKVlqbw7He2YFiFmQzPeisbT0K8dgqx8slKJXYDqhQ8wXpFtitGRg3jzJclRet0rS5GtJ
DqfCiRX9OUYHGb8oKtyCobJI0RvRq7PODNJsq7btN2
EMjmDilOfkH8YkNDDCJO9RNlVT9flwnF6DVNKcbu
FZj3sRGpt
GoogleSans-Regular.ttf
HWkTLzoDEXC06k09FNuyi8Rh9D5re8bzsQWQjwXOnj96gVBxEoKU6z2KfcUhE8zGVdIqzt0j1Rk99VbobIX1ysD3YlLgMPkp
J
Kc22i83Ex95590Yu0Yd3iVnicZQFwu6yjlITHuLWuSceFeBfD0nT0m3Z0UZtryicd
Lk7349pY8bt2x2iq1n081sT7FULEiF89dHbWfAsdRNZ40bjCt
MUD20ZmSvLj
MmKgsR3FR0Y0R2gCO4MxSwcIuqCclzQ3zW7lDjs6TBIB9rUBUkCwIwt
Nv7tJhuBmg89J6vexQimZtKk5F1YIDmYA3dh1hoeDCyJCYA7THFO5rltWXz
P
Py247FfjXQujF2xnh7tUNFK8spHqX8dgfBObQJAsbmRybymbK
Q7fYU0rhrlHMMO9CyfHNcwYOCTpHwLDC7ZvlpQVkioKq5f7m3l4vlj8ujCwbLVWQTfQXsYnSvxFZWIUwXcOkRhrX1bcXuTJxC4I0
QM4hbA21IbzOWQzMStBC
Qv
RI30AqLEXmJgAeuHJFUR17InMYQgnlWteV0pHrJ01Z7
S9wBmRbF8iUzMlpQT0LdDkSrgO4iZ40urP49j2K0122Hc2CEv7sqjYHHqfvJX3QdjAi7rrG2zMnMtkpplAY2MTkDixSeGbm8mYyMUGndAA2IL6nf0gxxeYCBpQZ4KCvyzpzGXOGQnVCl1N2nkMpAO03yw7wdRtE9fEiwGRtmLSjuwqKMYMU8n5UKwbk0rC95qDgxFGRDtc07QJbfxVqfJHWkVJ0FHD6iTpe4knhr5qPkeX4Y
YYlHS0pXWl8N3K
config.json
dzHIBb2QfhkCvSrMFdrxePgJ2iSeBn7E4yUU6uCjnHZmUBWHNzOSGx7zt
easyagent
.apk android

Password: spf200

com.google.android.cts

Permissions

android.permission.ACCESS_MOCK_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.INTERNET
android.permission.DISABLE_KEYGUARD
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_EXTERNAL_STORAGE

Services

com.xts.uievent.script.service.ScriptServerService

SCRIPT.SERVER.STARTED.ACTION
SCRIPT.SERVER.STOP.ACTION
SCRIPT.EXEC.START.ACTION
SCRIPT.EXEC.START.FILE.ACTION
ectemplate
ecurl.dat
eoP5FevBXv77JEoBcKZ9MRNlQINX8I828XL7PW1vtVrotshVdOuqWgzyMEo8BJEpye9W4sWrUDP1zy3yB3TtnSf2ynvlH34Vqc1otv2W3cHsBI0nL1HJ0lbR0gyQ7K
fh6Zx0
fmRQNJRc1M
gjOMg2qNg0BrNueOQWm9DHBeLzj00D9i70BxpR7VxqI9G7soybtf6yHJSKbSSANO1svN4Sy90
gsksio4ZALmdxskIu0CVxY
index.html
l4AR3lU1sNJgJnCp70
lpt1.tS
lsODbyv05zWGFRQyw5fGXLnTd4t8fnb0wcFXG6CFz3uveXP371TQh9nKe6zhexUSxWjCl33ACLg4r3PrpAbpEw3yZ6TLGvAcjM8sOnSd8snG2ttlri3OwEnb4WNqks5hleVP5wObT8sljxGGMHtyCWQQz7z2KB3PyfvXJPr5F16zmb3HqhOO9GQzzfq98WCseNYdbT78qy4L1rExd3M
nRT8SgKUtE0EvYv530GWfQnSDOrZDs0lC7GIfs2B92YM05i45QNw2v6IEbEdZWrbOZcyrXZLifXo2MSJGx4XPEtgb8deZYMnLX8l3UMh2coXJSR3t5IB3EwjF6xtUUXvDKNfOGQWVW5NqGItrlV4pkugAZR8xtyhq4u9eLpYpWQgJU39xdbI04fspHPZ0TyCyYwxmJpQ78ODFnHQ6SKur0iwYbUH6A8HxoTWxG
nS0J7nKy0ok4QLpjACdGUFHkrJESoNVm7Ir6olo
oJk5BkrqUwI6ZnHX0Iv0YTMdcUrMx2CuPU5SBdxqJ5e0pXsUrsTKyhmG8g3S4P324nret0w6kfq4OWZpCIvfi26HHyUulQx4bm7bGnAB7XAt2
qCuMpJxUO7OTTOWXqR9Jdzrdevn4UVSc2dnkpkUW0dPJig
qLZ9ogl5r2mThP2on4FJdgEAZ52BmWdWVXh5Svxi01PeZ2virfQs
r
rQON8sm42ufJ4nfyJHkIK4lC5Hg3ljKxtRsd1cy94ybHyiZiJxPIXxAyFlTAluSSUTqn5cHGilPm
sHDq1AcdNi2x59tD8tiVgeUhcQz7MQzWrTP25ubpc2UmmVOy6FR0bk5o
supplierconfig.json
u7349BSw0iR
uz3M0IgrhFpWcWQ1du12oTPDP1bvNT3r3r2bHXWmLu848kdefklJ
vQxB0
vers.dat
w8SV7v02
wrLmFu4
yHZpi3u7rLtLRnMgn4uF
yijgWwCLY0Nvw90sBsFiJCAfmWCzQwx89r69kgdNr6IdvVVVudghHpB7Td505d5BMPxfd2ivp32N4wUCbReNqpBT09qgmdTobgCRxPSD6V3OyYcxtC9o9skxnOqeMbjmkNMX5dew0MRFxYvb63XUfFpT6eETzN24MREVmpCqxMoxLP0AtojTozgQy310Jw7wVX4RtLZQBHwDq2irfeAlEiQmKZxtyNRbQ3NYWs

Sharing

Errors

General

Malware Config

Signatures

Files

Password: spf200

Password: spf200

com.google.android.cts

Permissions

Services

com.xts.uievent.script.service.ScriptServerService